Threats tagged 'ghsa-w4x6-r3gr-44xf'

The Form Maker by 10Web plugin for WordPress is vulnerable to reflected cross-site scripting (XSS) via the bulk_action parameter in versions up to and including 1.15.46. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute when a user is tricked into clicking a crafted link. The vulnerability has a medium severity rating with a CVSS score of 6.1.